CVE-2003-0963
Published Jan 5, 2004
Last updated 7 years ago
Overview
- Description
- Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:alexander_v._lukyanov:lftp:2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39A0F70E-3C7D-421C-A719-18ACEEB7B902"
},
{
"criteria": "cpe:2.3:a:alexander_v._lukyanov:lftp:2.4.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EF18837-2EB8-4E76-85F4-C76C7494BAE6"
},
{
"criteria": "cpe:2.3:a:alexander_v._lukyanov:lftp:2.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07BB574A-166F-453F-899C-881C7F11B97A"
},
{
"criteria": "cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42857A56-4D5B-425C-BD04-B36C8EA5A265"
},
{
"criteria": "cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "929305F4-2C65-472B-B72B-F6F8231054E2"
},
{
"criteria": "cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6F9DB4E-3F80-4F55-A196-ED980E6B87E1"
},
{
"criteria": "cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D26360D-8E29-42A1-B5C0-6625B52352A8"
},
{
"criteria": "cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEA467A4-F1FD-44E0-8444-590741EACCA6"
},
{
"criteria": "cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D194098E-509A-4DEF-9C7A-E7D7E000F0D7"
},
{
"criteria": "cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7043A058-1A78-488E-907A-C63FD61B4F15"
},
{
"criteria": "cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B30C4BF-0C0D-4DA8-87DC-4F4FD1EB5C12"
}
],
"operator": "OR"
}
]
}
]